diff options
| author | Arne Schwabe | 2020-07-17 15:47:32 +0200 |
|---|---|---|
| committer | Gert Doering | 2020-07-20 21:40:11 +0200 |
| commit | ec7d0e8e0f8cd8f1c5fab58c795a59828eba6ae7 (patch) | |
| tree | 612ee9aa878affc3acb8d36710a4cbe8cfaf60c6 /src/openvpn/crypto.c | |
| parent | df85950a61879517ae77472eeef526cdd1906662 (diff) | |
| download | openvpn-ec7d0e8e0f8cd8f1c5fab58c795a59828eba6ae7.zip openvpn-ec7d0e8e0f8cd8f1c5fab58c795a59828eba6ae7.tar.gz | |
Drop support for OpenSSL 1.0.1
OpenSSL 1.0.1 was supported until 2016-12-31. Rhel6/Centos6 still
use this version but considering that RHEL7 and RHEL8 are already
out, these versions can also stay with OpenVPN 2.4.
All the supported Debian based distributions also come with at
least 1.0.2.
We (accidently) unconditionally compiled some key exporter code on
OpenSSL 1.0.2+ without problems. So always compile the whole
key exporter feature for OpenSSL.
This also allows the tls groups commit to be applied without
adding ifdefs to disable that functionality on OpenSSL 1.0.1
Signed-off-by: Arne Schwabe <arne@rfc2549.org>
Acked-by: Steffan Karger <steffan.karger@foxcrypto.com>
Message-Id: <20200717134739.21168-2-arne@rfc2549.org>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg20441.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
Diffstat (limited to 'src/openvpn/crypto.c')
| -rw-r--r-- | src/openvpn/crypto.c | 7 |
1 files changed, 0 insertions, 7 deletions
diff --git a/src/openvpn/crypto.c b/src/openvpn/crypto.c index 1ce9818..bbf47ef 100644 --- a/src/openvpn/crypto.c +++ b/src/openvpn/crypto.c @@ -428,13 +428,6 @@ openvpn_decrypt_aead(struct buffer *buf, struct buffer work, tag_ptr = BPTR(buf); ASSERT(buf_advance(buf, tag_size)); dmsg(D_PACKET_CONTENT, "DECRYPT MAC: %s", format_hex(tag_ptr, tag_size, 0, &gc)); -#if defined(ENABLE_CRYPTO_OPENSSL) && OPENSSL_VERSION_NUMBER < 0x10001040L - /* OpenSSL <= 1.0.1c bug requires set tag before processing ciphertext */ - if (!EVP_CIPHER_CTX_ctrl(ctx->cipher, EVP_CTRL_GCM_SET_TAG, tag_size, tag_ptr)) - { - CRYPT_ERROR("setting tag failed"); - } -#endif if (buf->len < 1) { |